News for hackers. Stuff that matters.

A comment on Teleport 4.3: Modern Replacement for OpenSSH. Parent comment

Re:Teleport 4.3: Modern Replacement for OpenSSH by cronos on Thursday July 09, 2020 @07:08PM (#23786323)
Yes, but it's rarely how companies use OpenSSH because it takes a ton of work to set up. Teleport gives you all this functionality by default out of the box. So it's not inventing anything new, just provides better UX.
[ Parent | on HN ]
Re:Teleport 4.3: Modern Replacement for OpenSSH by number6 on Friday July 10, 2020 @12:39AM (#23788213)
Its not a ton of work, most works out of the box and requires just a command line argument
[ Parent | on HN ]
Re:Teleport 4.3: Modern Replacement for OpenSSH by cronos on Friday July 10, 2020 @12:56PM (#23793542)
A "ton" of work may have been an exaggeration.

Maintaining a CA (and dealing with cert rotation) is some work.

Other things are indeed just a flag or config option (like jumphosts). But it takes work for a sysadmin/devops to educate all engineers in the company and make sure everyone uses the correct setup and doesn't end up dropping authorized_keys around random servers.

It's not that difficult technically as it is socially.

[ Parent | on HN ]
Re:Teleport 4.3: Modern Replacement for OpenSSH by number6 on Friday July 10, 2020 @02:27PM (#23794673)
Yeah, you are right about this. Just thought about a personal setup, but getting it all up and running in enterprise scape will be more work than just a few flags
[ Parent | on HN ]